Signed MCP Receipts Create Evidence After the Call. They Do Not Make the Call Safe A useful new MCP project makes an important correction to the current trust story. Most tool-call logs are still self-reported. The agent says it called a tool. The server says it returned a result. Maybe the proxy wrote a trace. But unless another layer can verify what was sent, what came back, and in what order